IN RE APPLICATION OF: Kenji OHKUMA, et al. 
SERIAL NO: NEW APPLICATION 



Docket No. 210580US2SRD 



IN THE UNITED STATES PATENT AND TRADEMARK OFFICE 



GAU: 



EXAMINER: 
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FOR: 



ENCRYPTION APPARATUS AND METHOD, AND DECRYPTION APPARATUS AND METHOD BASED 
ON BLOCK ENCRYPTION 

REQUEST FOR PRIORITY 



ASSISTANT COMMISSIONER FOR PATENTS 
WASHINGTON, D.C. 20231 



SIR: 



□ Tull benefit of the filing date of U.S. Application Serial Number, filed, is claimed pursuant to the provisions of 
35 U.S.C. §120. 

□ Full benefit of the filing date of U.S. Provisional Application Serial Number , filed , is claimed pursuant to the provisions of 
35 U.S.C. §1 19(e). 

■ Applicants claim any right to priority from any earlier filed applications to which they may be entitled pursuant to the 
provisions of 35 U.S.C. §119, as noted below. 

In the matter of the above-identified application for patent, notice is hereby given that the applicants claim as priority: 

COUNTRY APPLICATION NUMBER MONTH/DAY/YEAR 

JAPAN 2000-198478 June 30, 2000 

Certified copies of the corresponding Convention Application(s) 
■ are submitted herewith 

□ will be submitted prior to payment of the Final Fee 

□ were filed in prior application Serial No. filed 

□ were submitted to the International Bureau in PCT Application Number . 
Receipt of the certified copies by the International Bureau in a timely manner under PCT Rule 1 7. 1(a) has been 
acknowledged as evidenced by the attached PCT/IB/304. 

□ (A) Application Serial No.(s) were filed in prior application Serial No. filed ; and 
(B) Application Serial No.(s) 



□ are submitted herewith 

□ will be submitted prior to payment of the Final Fee 
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[0 0 5 3] 

*m(D¥y h-&i$. 2 X 1 2 8 X R+ 1 2 8 = 1 2 8 (2R+1) R = 

8(Dm^lZit, 1 2 8 X 1 7 fc?y h £&Z> 0 

[0 0 5 4] 
^(C, S-boxtCa^Tliit5. 

[0 0 5 5] 

#ffif©HgF-£Tftt, AffiASt^ltS 8 tfy h S - b o x Srfljffl-rs. 
[0 0 5 6] 

0 5{C, 8 tTy h S - b o xCQAffi^O^S^t. 0 5lC;l3V^T'» BB#I3£ 
[0 0 5 7] 

msomiz. m&±e>m (7 2) #s [0] cml, locate (a a 

) #s [1] {C*f£SU ^(Dftnz&V&Oim. OF) ff& [15] JCjtfJfcU 7^C(5D 
IflCloT, -e©2feSg©'it (6 9) #s [16] tC^fo&U fOloM (6 
A) #s [17] fC*f/£U JKTHSi©M1!gT&S. fit, ST#©te (5 7 
) # s [2 5 5] ICjtfJ&^S. 
[0 0 5 8] 

EI 5 ICflf^LfcS - b o x ^©jiy^&S. 

• ft^n^fflt* : 6/2 5 6 mmmM'bmz 4/256) 

• m^mmmm •. 22/256 onsms/h'fiikj: 1 6/256) 
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o 

[0 0 5 9] 

#cfc, #^©S^s-box (*fcti/Mgigi:%i^/SJ) ©aWco^T&fB"* 
[0 0 6 0] 

0 6{C, ffi* S - b o x 1 0 3 ©rtaPifi!c«S^t. r©MTit 4 afc#[<0 8 
lf>y h S- b o x 1 1 2 (H5#flg) ZZmmML. mWcM 1 1 3 &i^'2I 
S PN«3tK:fcoT^S. ZlCD'«jttt, S P S*aitfcPa^^£ 
2a@<3Dfl£itJS^ieS*lfe#3»«i2as PN^itil^Jfct-o S-b o x 1 1 2 
©Al&EfflTfli, ^-rfitilliri 1 1 ^S-box^tt|113{: 
tt, MDSPIOTU inS/hMD S £Bftf, MDS s ^*fHf-5c /JMVID 

[0 0 6 1] 

JlHili 1 6 5i»tT?^3SLT*<&. dCIT% S-boxAffiiJ^MIIt Sfl 
If ©IS, ^D7#:GF (2 8 ) (Djhtfrte-t. Z(DM<Z>Wi&<Dm%i&m&,lt. x 
8 + x 6 +x 5 + x + 1 7?2D<g> 0 
[0 0 6 2] 

[0 0 6 3] 

0 8JC, l|gcoBP^CD^M$:^-r a #W<z>te#©©W«^&S:**i§Wu 4 

M#[© 3 2 tf y hifcizS - b o x 1 0 3 (BI6#M) £MD S fr^JfiDffcfWf 1 0 

DSfi^SttlU m&A*MD S fcltftf, MDS L t*fHt5o fcfc'U ^3 
TfCDMDS m*S-b o xlCJifBUfe^^^^tR^STf&Siht:* 

[0 0 6 4] 

^MDSfflIfeli«lt |£*S-box©3 2lf*yM|OffiijfeGF ( 
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[0 0 6 5] 

4il0MD S £^-rS&Ck)\ 4 K^y h^g-e+^T^U, G F (2 4 
) ±©iII:|IJfflLt||^T^S 0 ££fC, MD S &MM#lte. : h(D\Z.~$' %> 

[0 0 6 6] 

niKJctt, ^tij^^<DGF (2 8 ) ^gf (2 16 ) itmm-t&$*rs\G>&. 

[0 0 6 7] 

GF (2 32 ) &flJfflbfc^MDSf:o^t|lft5 0 
[0 0 6 8] 

ffi^S-boxfflAffiiJ&GF (2 32 ) <Z)^;£<fr&LT> ^:*5tM 
D S &&?f~f<&. itltt, S PN«^T*©a^fcf5m8re&S. L**U 3 2 If 
y hffiT?ttfB#^JCj:£igigtt^Sft^ttJ&v* 0 ft If ic J: &#-£-:fe--fl8<7)MD s 

#±©^#£1 is tt £ 1ft±ifi y HOll^Iv * *b T? & £ . ftH4 & UUx. £ to ic 

h t- -5 ^5f £ T'&Jl «T|g i: ^ -5 „ 
[0 0 6 9] 

28 + x 27 + x + 1 T*&£„ 
[0 0 7 0] 

GF (2 4 ) 5:ffJ«Lfc^:MD StCoVNT|^H^-r^ 0 
[0 0 7 1] 
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, x 4 + x + 1 

[0 0 7 2] 

1 o(Dfi£^:S - b o x 1 0 3 lCfcV>T4 OCD S -bo x<Z)#*©& 

-D<DWi± S-boxl03 £>£>4ffitf)4 h • f 2 -* G F ( 2 4 ) tfD^n 
[0 0 7 3] 

fit, 8 y h • ?-*(DmC&m^^T, 2g04i«S-box 
JfOlSfOffifWS 10 4 &C4 ff 4 #[©MD Sf?#J (05*1*0 1 0 T?W:S_t&tfy h 
10 4-1) &MV^& 0 
[0 0 7 4] 

* (Dill C^«{C^$ tlS. 
[0 0 7 5] 

S-boxffitf'y hffilCfcfJG&UT, 8i0MD Sf?#[ (104-1 — 104- 
8) $:MtbT, ^MDSttS. 
[0 0 7 6] 

Z.tlb<D4ft 4#i©MD Sff^Jtt, ftlftl, ^9>^»5 £#IElT§ 0 #M 
[0 0 7 7] 

#J£:*S- b o x<Z)|!?C&g<Z)S- b o xffl^S:#ffii:Lfc*5ISJCJ:oT ( 
[0 0 7 8] 

£ fC, M D S fr #f #iIlHll$fc«-&, 3 2tf«yh^i: ©#Mtfil$a&3lfa il 8 tf y 

h m&co >y h iste zm&&fo-&fe$jm&j&Mmtf ^im ^ & & „ 

[0 0 7 9] 
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fcfc, ±mtmm<^>^^iz a u, 8 try h • T-*-#c£>e>*><Di«ic®:g<D2 

V h Z tlzmMZft OZ-tilLX, &mMtf8 fcfy h©4i?f 4#J<Z)MD Sf?#[ ( 
GF (2 8 ) ) 4IMILT, ^MD S fc^S Z h=fo oTIB 8 

1 6 tT y h©4fr4#l©MD S fr#I (GF ( 2 16 ) ) * 

md s k-rscifcfcBriB-e&s. 

[0 0 8 0] 

&:*:s- b o x0>t*aj«fs&, ^Tim-^it-rtc. Sfc5=fc©&M#S 

So 

Mill *l?J©A^mi:, *tfe©ffi^Jm«W, *t&©*ISHa£W:JSfc5fc 

[0 0 8 1] 
[0 0 8 2] 

Ell lie, ^^^^rL-;i/gp©^M$:^t-o 12 11*. J r-*M&B<X>8L9i 

Wl<d l S^tc^-jeS-rsaJ^T?* *J, 13 1 lii&Jg&ffcJi ^md s tc 

(s- b o x» • t£ffcS) 133m) t?*u, i 3 4 &3Mfi«r»&?nas-e& 
»j, 13 5 tesifjkflttisas -e&s „ ®i it?w:#i&ltv*5#, 1 2 kdsp^©* 

^i&5llc/SCTlft*;jg3*iSiiitc«;So &fc> 1 2 8 if y h<&HS:ffl;*j"r5 

2R+ 1) SfcfcS (R= 8©»<£, 1 7ST*2&<5) ., 
[0 0 8 3] 
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011 ©MTW:, 2 5 6 y h(Z)^7£F e i s t e 1 S!J!ft U jgL*&3!0>#S<Z> 
t6. 

[0 0 8 4] 

2 5 6 bfy h 2:-rs»^lCtt, iiH ±fi[ 1 2 8 tf y h &*J© 

©tti^ffiitjff 1 3 1 ic^x.. t& 1 2 8 tf y h mmmmmm 1 3 2 ic^xtu* 

<fcvv Gfcgfc 1 2 8 fcfy ^"TS^id*, f'©12 8lf*;hS 

lDS©i|*^ffc«® 1 3 1 JC#*.5fcfc%jlC, imj&MWkMl 3 2JC#*.*l«J^ 
c 1 9 2 h il 1" ^^(Ctt, Mxll _L& 1 2 8 Ify N 

<Z>*87£J£ifeJi 1 3 1 jc^*., Tffiflff 6 4 tfy h £:_h&<!I 6 4 tf y N £; fc^HrLfc 

i 2 8 tr y h zimm^mm 132 ic#x.*u* ,t^ 0 

[0 0 8 5] 
[0 0 8 6] 

01 3 (C, 01 1^01 2lCfettS*i|»^SISl 3 Z(D&*<Di&Hm&8kM 
1 3 30«&^f o 14 liiS-boxtfey, 1 4 2 tt4t^J© S - b o 

[0 0 8 7] 

ZL©S-boxli, 04 C0RgF#fll3HW©S - b o x i: |^ £ =fc © T? £ 
I/, Mfc**©"??* /JMV1D StCo^ Tfc RE* * fe, ftX^r^a.- 

;i/gP(Z)#mtCj:oT S -bo x^/JnMD S <Z>«/&&gE;fcS£ fcfc nTtB-C&S. 
[0 0 8 8] 

01 4 tC, 01 l^Hl 2 &C£tf 1 3 2<D2r*t<Z>i$timmAM 

13 30H©MM$:gt o 01 3©#j£lC*fl/T, £M£tt»3I&ffi 

14 3 S:#iWLfet)©Tf*So 

[0 0 8 9] 

3£>JC 014{CfcVNT. S - b o xlc**-r5A:fcfcgMfc«a&«fO&i:<55t» 
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[0 0 9 0] 
[0 0 9 1 ] 

t^V (H Q , Hj_ , H 2 , H 3 ) <©ffi#^;b1t^ffij&^S 

H Q = ( 5 a 8 2 7 9 9 9 ) H = 2 1/2 /4 

Hj_ = ( 6 e d 9 e b a 1 ) H = 3 1/2 /4 

H 2 = (8f lbbcdc) H =5 1/2 /4 

H 3 = ( c a 6 2 c 1 d 6 ) H = 1 0 1/2 /4 

m^mc i ©ffi^fc^S:, Ci = (c i0 , c ir c i2 , c i3 ) t.mi&-t& 

Hj (0ffl#^fri*©&j£tC8 l^y hLF S R&JgV**. fill LFSR0M 
#J®^{Ctt (1D) H S:, LFSR©*JMIICtt (8B) „ £fflv^ 0 ~ © L 
F S RSrMV^T^fiKStifetT^ h#J£ 2 fcfy hdoi^ffiU jtSJti: ITSMt 
S 3 2 £*>y h^^CHj fc^-r*. 
[0 0 9 2] 

[0 0 9 3] 

fcfc, LFSRffiDim »Tg£fcLTfcJ:v>U g^tbtti^o fa# 
[0 0 9 4] 

±S(D 1 tf >y brfmt-?Z> S-box (141) ICJ:*J, 8 tf y McM:£M 
/JnMDS (14 2) ICfcy, 3 2 If-/ MC^fL£M&£-frS^ 

$^ic^fe, «MtiiKov^te, *mds (131) tfffria© 
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[0 0 9 5] 

[0 0 9 6] 
[0 0 9 7] 

U<Dm&M*B"?. frj*&L£GF (2 32 ) ftS^ttGF ( 2 16 ) SrffJfflbfc^M 
DS (09, 04O1 04, 011 1 2 CD 1 3 1 #Rg) iCfcttS, 1 ^<Z)A 
#£A-MD Sfi^'Jco 1 o©Sagi:©«l©fM!Ctc, r<Z>j(K^f£fflt^1KS:fflv^SZ.t 

[0 0 9 8] 

203, «8$4x!©msp2 o i, gmmmmmm 204 sjbvnt*/* 

[0 0 9 9] 
[0 10 0] 

3g&$2 0 3 te, A#<7_ K£fiHBt& 2 5tSS[fc*&Ufe*B^(Z>m»S:fi : 
T*&£. 

[0101] 

Iff ^ti^SBP 2 0 1 m»<z>SS^i: UT^1*S«i»4xS:^IS#:±©m»K:M 
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[0 10 2] 

mmmmmm^2 o 4 a. mm.32 0 3<Dm±!twmnmmB2 0 1 ©m^t? 

[0103] 

mmfoWiMmmz 0 0 (Dmmit. ^ps#gf (2) ©mcf (2 k ) 

[0104] 
[0 10 5] 

x j tc£v^ii&fti£^£ j amm* o~k - 1 £ u -eti^cD^ffljco^TcDiE 

[0106] 

GF (2 k ) (Dfbit. M^iaot, &3^$Cx(Z) (k-1) #;<Z)#^ 
SSaj x 1 i:L/T^T^^o 5t3i%:mm-t2><mz. ^(D&Wi £M^T c k _ 1 

c k-2 "' c 0 fcl^^H^S 
[0107] 

2o©^ca=2a i x 1 b = S b j x 1 COWt. 

aXb=(Sa i x 1 )x(2b i x 1 ) mod p(x) 

[0 10 8] 

3^t% p (x) &gf (2 k ) (Tym^m^tmtn. mm (2 k -d & 

3 2ffl|^, IMS^illtp (x) = x 32 +x 28 +x 27 +x + 1 *m/v&m 

it?, ^m^m^^^x x 32 <Dm^m^mnrz.m^icit, (x 28 +x 27 

+ x+i) £j|&-r t^o ztzm-t, t£oT, «%*fek^^ti<7)#^i:^ 
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[0109] 

m&t.&m.mtt.%iz2 k m<D&*&vn& mum** 2 2k m<n^yhv 

[0 110] 
[0111] 

, M^ifc a <D±& t h £T*tf>M SB (Most Significant 
Bits) 7?&<5„ 
[0112] 

mm^2 o i M^-r^^y- uxif otv^„ 

[0 113] 

i©!@3S^- Kti, (f+1) l^y N©#«b fcffe8a<BJ:ffit bfy hfc 

Rteg>&j£frb&&X"g&a o*»J, (a [ (k-t) ... (k-1) ] Xb) 
[ (t + 1) ...2t] mod p (x) fC ioT^^^tl^o II"e, a [ 
(k-t) ... (k-1) ] tit. a©tt»^e>, (k-1) &fr*> (k-t) & 
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[0114] 
[0 115] 
[0 116] 
[0 117] 

i»^IEIft<Z)lSK:MDS^JtCJ:5*8^ij|A^S 0 MDSf?^J2lJi, 
•^n^«t, IKSt (n) <Z)<7- KX>* ft, K#k If y & 

«FO^, (2 k ) ©jofcUfcU nM©7G<7>*S£nfS(Z) 

MDSfr#ftcj:S»jggESIte, #*©Affl*©t7- K©»©TIS*«#liES 
ftT^&fcv^eefcfto. 

[0 118] 

LfrU -*tfC, «fltGF (2 k ) jKBfi^rjIRIfW:, GF (2 k ) _t©^l£ 
[0 119] 

mi7(c, *nj6^J8©iW^si^a©#^ffiis:^"r. bu^l^gf (2 32 ) 

&5V^iGF (2 16 ) &3pJMUfe^MDS (09, 04(7)104, 01 1^01 
20131) fC, ^®|i{7^m^fi£M^£3£;ff:-e£.g>„ 
[0 12 0] 

017©Mt'(t £1*, 01 6©^|5I#:^miSS$:MD S^'JtC^LTV 
[0121] 

0 1 7 lCfcV^m = n tf5 n 2 m(D^mfoffcWl&n 2 0 OCD^^OD^^ 
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[0 12 2] 
[0123] 

t^Wmt-t^ a lit, i, j tt, O^P>n- 1 £Ttf>Sgffc«IfcU e>££-T 
&. tti, ^P&ttGF (2 k ) k J: »J =fe>/hSftiEjRt?*)S 

£„ 

[0 12 4] 

itlfCioT, Ell 8<Z)J:3fc^if#IS3i'T?£<5o 
[0 12 5] 

*&8itlll»SaP2 0 1 A^o»jg»7- F<Dm<DPim*. MtSMDSlT 
^*{Cf5l5t^*§fflt, EI 9 (O^MD S^J©MTit 4«3®<Z) 

[0 12 6] 
[0 12 7] 

H191C, MDSfr«Sl0t^$:^t. Ell 9 £ e> tc, r 

©MDSffH^JIiltt, S5R^SP2 3 1, /Mf ?fj5£ff JISP 2 3 2 , W^SP 2 
3 3 £Mv\T#|j&3*l£ 0 
[0 12 8] 
EI2 0(C, Z(Dm&(D^M<D— M^^-To 
[0 12 9] 

HSt£/*8IS 2 3 1 tt, 9>^AtC, ntf npMD S f?#[©#fT#J5yit&£/* 
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?5^bTfe< ("Tfcfc^, Mflt£f»2 3 1 f^-e, T&tfcf 

v h©^?^^f9^®f i7 V &fre> .r Clefts) . 

[0130] 

^©fJ^m©M M S ^S^r ^ tl 0 

[0131] 

#cic, 'Mm^tmm 232^ sun&ffcas 2 3 1 <D*£f&Lt^m<D 1 &/m? 

Wktmh Uf'^S2) , 2 3 3 /M^fJiSftlfglS 2 3 2#ftlfL 

fc/Mr^Jtf**^***:^"*'* (X^-y 3 ) „ 1 o*e=b*© 1 #C/hfT#l5£ 

[0 13 2] 

fi-^tS Uf'^S4, S5) o 
[0133] 

£*±£> ntfC/Mf^*"??, mvmm-£fi^ (Xtv^S 6, S7), l&fr 

^J&m^'T* (Xf>^S8) „ 
[0134] 

, tfc#JC'JBV*SMD SftmZ. XtV^S 8 T'HtMD S ff ^©aSS^JlC J: o T 
[0 13 5] 

[0 13 6] 
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[0 13 7] 
[0 13 8] 

02 1 £©«^©MDS^J£j*I£g<0*/&M:fc^i-. 0 2 1 KmZftZ 
Ji-^tC, rfflMDS^Mgtlt 5l3l^fflJ2 3 1, /jNff ^ff»SP 2 3 2 
, ¥'J£3|5 2 3 3 , a»*T#J£/«fflS 2 3 4, SgfT^PW^SP 2 3 5 &/B V*T«JS3 ft5 

o mhi£*»2 3 i, /Mm^tmm 2 3 2, w^gp2 3 3©aj^«, 01 9. ^ 

[0139] 
02 2{C, Z.<DM^<D^M<D-WZ^-to 
[0 14 0] 

*-f, ftCDM^lBpBtfCLT, 5I^^SP2 3 1, /MT#j5£ff JJSP 2 3 2, 
W2 3 3JCJ:*J, Tfilt fcfy h©*#f0gi^^^5MD Sf?#J&£j£*r S ( 

x-^y^s 11). 

[0141] 

?£{C, j£fT#J£f» 2 3 4 |C «fc U> ^StlfeMD Sf?^J©5S»ff^ ( 
^r>y^S 12) „ 
[0142] 

mn &mfeB 2 3 5 #&*>*ifc®fr^j©#*<z>5^#, ret try 

[0143] 
[0144] 

l'OTtiTfet \Z<y h©*#M^ttfcV^ifStf&*ltf Uff^S 1 3) , S 
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1 1 fr^UH^o 

[0 14 5] 

i 2v^m^nt^mm^m.-^^m^^ z. ^{c&s m\z. xf>vys 1 1 

[0 14 6] 

(DMmtf&&-tft&. MD S ft LWi~r£ 5 IZ-t frit £\,^ 0 |WJ-^rj 

ft (c iwr c m <d mm l r % miD & ^ „ 

[0 14 7] 
[0 14 8] 

Htf — ftfo(DmmV>%Qtf l££t±0lC&£>&V^5 iCMD S ?T#I £ 
[0149] 

?£{c, S- b o x£/JMVID S<Dm&&fr-£*miR?Z> W£ft*lfl;-r £) 

mmWMMfflJ: V%&<ft£Z\}l%:Um-t& S - b o x HMD S(Dm&&t)-&(D 

mi iz n v ^ x urn -t z> „ 

[0 15 0] 

MDS &>^>^I$[B L2>^sIEL&^tf>T\ S-bo x©ft^^^5t^^p i: 
"T^h, #^M^#tt5S^ti, P B &C&£„ miff m?!(DMD SttB =m 



3 4 



ffiHE#2 001-3050938 



#2000—198478 



+ lh&3„ LfrU S- b o x£/hMDS0Jffl#-&;fo1*3:SMR'*S (&5V>« 

«S8fls-rs) 3i:»cj:y, ^7>^bt, SA^3i#<f£»# p B *»&«liE 

t6rt««T?S5. 3(D^> iiS^MD S J: *J fc**M#«3|S*VJ\$ V^MD S 
h S - b o x&IH^fcitSCIfcJCJ: U, *Bm3frJH#M«>* SS^ttS: «fc »J ft±3 

[0151] 

Jg#»i5£#&»J, W#tt3K*f3&.K#tcfeS. M##m&fcj*@ir-3£, S-bo 
£f£#fl?v*. B|f7;i/ifyXAt}j:, H^fflt^sOD/hSvxS - b o x 

[0 15 2] 

nM©C7- F^©8S^m£^t-£f??UT&U, #M£<Z> Affile - Kfcfcn + 1 
M«Ji;WI£3nTV^£V^'f±«?:?#o 0 LfrU S-b o xtt, H#fl«£ 
It, 6/2 5 6, 4/2 5 6, 2 / 2 5 6 & if&gtOtetf^ffi £*#0 M 
DST&oTt), n+ 1 fi^SftsfSA^ti-^tl 6/2 5 6©MD S il, -€-tl-?tl4 
/2 5 6t^5MDSi:t1±, ^#©##3c£'K#^V^ 
[0153] 

fl£3fe, S-box^MDS LT**l^3SlSHCSc£tt £3? 

flffStlfc^, iiTfli, S - b o x hMD S0iiM?:^at5it©i?:^ 

-to 

[0154] 

T, S-b o x t ©tiii^^ift ^ M D S & ^ 1 1 V ^ 5 . ^##$8*6 
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[0 15 5] 

1K0S- b o x<D&ffi£MM<D'MD S<Dfem&&J&"*& (*"rv7 
S21, Xf7^S 2 2) „ X^V^S 2 1 il^-^^^S 2 2 tei£tf)J« 

[0 15 6] 

#CfC, S-boxfti(5fj;^?,S-box$:loS^tStilt)i; (.^y 
^S23) . /J\MD S#i©^^^?)/hMD S & 1 oS^tS (^f>y^S24 
) o X^-y^S 2 3 h^y^S 2 4 ^©JiW-e^oT^J^U M#[ 

[0 15 7] 

J¥L (Xtv7S 2 5) , JiK m?Lit. 6/2 5 6) $:Ti5iM (Mx.fi 
, 4/2 5 6) ^^tlTV^frif^frlS^S,, 
[0 15 8] 

fit, ^*nrv>nti Uf»;^s2 6) , ^©^^©s-box £/J\md 

[0159] 

— Jj, ^ftT^&ttJU* (Xr7^S2 6) , S - b o x £/JnMD S(D — ~H 
[0 16 0] 

[0161] 

^fy^S 2 5fiJ:^fy^S 2 6®ftltt, HP^Ctt, #C © <fc "5 IC £ . 
[0 16 2] 
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ft 2 0 ji'Jtf^SE&ffV^ •r^TC&tt&SlfcLfca^tC. ^f^S2 7T?f 

G)/JnMD S 1 1 3©A*<W© 1 Otf)S - b o x 1 1 2(D^'mzht=.%^\Z^ 
/hM D S 1 1 3 ©ffi*«0 4o©S-boxll2 ^TffittlCfi: »J , J £ 
<Do%(D 1 o-£t>_t PS £T IS -5 fctitf, ^tf>^fl "TS. 
IE?:, Ai?I(D4o©S-b o x 1 1 2 (Co V^TfT ? (4j1U&£) „ 

(D/JnMD S 1 1 3 <0AtlM<D 2 OCD S - b o x 1 1 2 tf) &C U t=.%^\Z, 
/JnMD S 1 1 3 ©m^7iW®4 S-boxl 12 j^T^'ffifC&JU*, ~ <Z>1£ 
fE&-£fe£U /JsMDS 1 1 3®aji3|ffl3offlS-b o x 1 1 2#j£'|4fC&U 

-So 3tf)$liE$:, A*fflf©2o©S-b ox 1 1 2©jffi*^*)*©#>5rJCr3V^T 
ff"5 (6S»Jft5) . 

(D/J\MD S 1 1 3 2 o©S - b o x 1 1 2 (D^ifrffifC L feti^C, 

/JnMD S 1 1 3 (Z) Aij{ffif<Z) 4 -D(D S-boxl 12 jtf^TfStttCfctUi, 

U zhMDS 1 1 3(DA^j{iC0 3o(Z)S-b o x 1 1 2#M'f£&C&y 

, ^<d?%<d l^v^jimzTrnzMftrnzteni^ z.<Dtiiu&&fez.*? 

Z.(D^kU^> ffi^I©2offlS-box 1 1 2CDffl*^it©#^t:o^t 

®/JnMD S 1 1 3 <Z)ffi;frM© 1 Otf) S - b o x 1 1 2 CD^M'K IC b fe«-&lC, 
/JnMD S 1 1 3 0AiJi®4 offl S - b o x 1 1 2 ^T?Sf (C^ ( J , J^o, -£ 
0)5 1 o TUTS H^flltCife tit*, ZLCDftSESr^ftil-rs. 

mi7ffi!JC7)4 S - b o x 1 1 2 {C-^T ff 5 (4it l J&£) . 

[0163] 

[0 16 4] 

gf2 3 £)#J)|R **0tC^#S:|jl|fcOfc S -box £/JnMD S CD 
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S - b o xh/MVIDSffll^t)1t$:ll(#«), ^ft £ © 5 ^VM^A^ HWffi 
£ ft 5 <D *m%{~? £ <fc 5 JC b T % J: V*. 
[0 16 5] 

[0 16 6] 

[0167] 

[0168] 

02 5&C. H6©/J\*j|[lC^JCB"tS«fia#IJ&^'t. 
[0 16 9] 

[0170] 
[0171] 

^#^fi{C£tt£, S-boxlll 2©Affim /hMD S 1 1 1 3 ®/J\M 
DSM ^MDS 1 1 0 4®^MDS^'J!i, -tft^ft, l&^ltm&lC&Vt & 
, S-boxll2 ©Affi^J* (M*J£0 5) , /J\MD S 1 1 3 CD/hMD Sft^J 
(Mx.^07) > ^MDS10 4(D^MDS|r?iJ (Mill 0 9. 010) 

[0 17 2] 

£ tt3S?©jis#-e5fe^'r « <fc e> tcfli^-r s i £ % nriBt?**. 

[0173] 

02 7JC, i©|g^©atx^rs;3.-;i/aj©fl|^M&^'r. 
[0174] 

ii32t±, 0i i (Dimmmmm 1 3 2©3gaeg|:&a*LT^s 
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[0 17 5] 

02 7©ai^^r*;3.-;i/S|StMv>-s, S-box©AM /hMDSfr^f, 
*MDS*?#ftt, * ft-?*U 0 1 1 C9|t*^:x-;i/g|S'TrMV^ S-box 

©Ate^, /hMDs^rm ^MDs^ji: tsetse mnm cdmuc&otva 

[0 17 6] 

02 7CD^-i§-CDgiA;frK' 04tCj3VNT (Ugp-^ffln?) «&<Z>0&(fflJF 
[0 17 7] 

01 2 ©##£1^ IT, ©A U */ a e>ftS 

o 

[0 17 8] 
[0 17 9] 

Atl^-M S PNMBlr#tf>S QUARE*»IC»t4$^S QU 

A R El©#/R ijndael B&#«fc l ja!cit5-o(Diai: IT, S-box 
W ( B«|g©fi£^: S - b o x (»5^ttt»a) CDS - b o x^acDjft* 

S - b o xtf>iff¥ (&SVte*JS) ©S-box^©ra) tC|8Wfc^MD SiSIR 

*J W *» © tC -5 4b CD M D S CD m& -D V * T CD © ftf & ^ „ 
[0 18 0] 

t^5T% iiflt, S PNUHff-^JC^-TS SQUARE^tSl-eii, 
®»T3Eb y t e l££ 2 5 6 /\°# 
(DfffiCD byte 

k.^O0kfc*:mt=.-t25 QJ%#-y (AI^) ZAJJL. f LT, 2 5 6;^- 
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[0181] 

£*l&fM*i: It, ^MDS©^ (*MD S©A*M£ffiijMtf>tfy m© 

. (frj|Btf)|£*S - b o x ©154^(7) S - b o x £.%k&(DWk±S - b o x 

y-4> (fan- in) £2&±lCt-£) h V^ o *>(DX2bZ>* 3tl{Cj;oT, 

[0 18 2] 

£1\ 02 8—03 5 (#0(Cj3V%T^-^ti_hW^e>T{ai^\^tl^ : fe©h L 
[0183] 

MI$:I£??-T3£#><Z)V 7 h ^iTlC^oT^HJgnTtg EI 2 8~0 3 
[0184] 

02 81C, 04 <Dm^Zs*TAs>Pm2 4 ®^#^X^,MC;fett£;*:MD S» ( 
104-1 — 104-8 T\ 1 104-1-1 1 

04-8) fc, ■e<Z)Bff|g^ < j:^|g©4M^J©^S - b o x (^TO^i* 

1 0 3 T?, fc-£flU<Dl&<£«: 110 3), ^ LX&it S - b o x 5:Mf5 4 M#l 
©S- b o xfeJ:tJf/jNMD S Sr^-t. fe£U 0 6 ^Ka* L J: 3 &fttj&n&tt0 

2 8 JL^ P$ <D & 0 7?tt * © f B & £ # B§ b T ^ 3 „ 

[0 18 5] 

£T, 0 2 8tf)$K£, 010 fcRflllC, #S - b o x© 8 bfy 1 hf 
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o 02 8(1 #S-box<i!)8b:»;b©^^©ftt)£fl(fflllfyhS:Stflilfc 
3b(D ( 1 6 tfy h^-^^-SW^ &Btf)4 tf y IC O V^ T#t3S 5 M 

D SSS# 1 0 4 - 1 JCoV^Hft0J!LTV^ o 02 9T?tt, # S - b o x tf) 

8 V<Do%(DWl^U(D 1 feTy h & isfc^ffl LfcfcCDlCo V>T*&33:f?-5 MD 
SSP#1 0 4 - 8lCoV^3fct8LTV^5„ 0^£LTV\&VA#4fi(Z) 6 fcfy 

[0 18 6] 

, ^MD SjS<Z)#§P^l 04-1 — 104 - 8©8oSrHig^*5%©i: 

#\ MD SM'l 0 4 - 1~1 0 4 - 8CDe>*>©— g|5 (fill 1 O, 2 O, & 

[0 18 7] 

^1 04 - 1-1 04 - 8 IZm—m&t. l/t, ^©-9 1 Otf)gP# (10 4- 
[0 18 8] 

0 3O&C, ^MD SM(0^~3(X>n$fr (JS*T* #tC*MD S£nf4K) 104-1 
<Dtft8L<Df& 1 ©j£*S - boxl03-l-l - boxi:, * 

MD S©^^©4 oCDfi£^:S - boxl03-2-l~ 103-2-4 ©f&^tC 
fcWS^ff 1 6 <D S - b o x £©ra©il§#Wffi<&— -W&^-T. 0 3 0-0 

) . 

IH 3 1 IC, ^MD S<Dtft8L<D&2 <D}&j<S - boxl03-l~2 iCC^T, 
03 2 fC, ^MD S©f&S<JD&3 ©fife* S - boxl03-l-3 ICoVaT, 
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®3 o £.mm<Dm&*7X'? a 

MS 3 IC, *MD S<Dtft&L<D&Z4 (DjfcitS- boxl03-l-4 ICO^T, 

m3 o tmmom&zm-t* 

03 0-1213 3 £#Bg-T££, *M D S 0)^moWk± S - b o x©H— ©S - 
boxJCii, V^ftUCr^Tfc, 3 0 ~Hf 3 3 (D <fc ? JC L T3Mfil&3& 

Sftnc J: UM-£3*i£4 o©e> hjWJg^StiStf, -t*ie> 4 o©fcfy MCo^ 
Tfc^teftt&S*&lCJ:oTg£'3ft£. d©^*, *MD SfiDftSffl^l ©J£ 
^S-boxl03-2-l[CoV\T, BI3 4{C^-r o ^MDSCDftgCffiCDi 
^S-boxl03-2-2~103-2-4 ICoV^TteHas&^B&^Stf, fWf 
ffi<Dffi&M$kT*2b£o ^3TtelU3 0~i3 3 © «fc 3 fcSMt&ftfi&SftllC J: 

5*§£-©ftU:0 3 4 ©£5fc^l$a&JI?nK:j:S*g^&fTofcJ:3JC^LTV*5 

«iC#tfTfroT%«fcV\, 
[0 18 9] 

[0 19 0] 

H4©J:e>&Bi^[ai&{C^T«*-r£2m (t«5t>^B3O~03 4) 

iul8©ft£*S - b o x 1 0 3 £frp£©S - b o x ^I8©££* S 

- b o x 1 0 3 ©gu¥© S-boxi:lt t&S©fi£:* S-boxl03 tCfel^-S 
£¥©S-b ox&ftE&l/Tg&ffiSftTV^. 3©£:£fC, rM¥5:^MDS 
(13 0-1 — 103-8) ©aMRgflSfTS. 

( 1 ) f&S©fi£:*S - b o x 1 0 3 ©fJ^lCfcWS^S - box (^T&-£ 
ft 1 6l©S-bo x) ©3 -fefr&ftjftJCiBAviE 1 o© S-boxt, $£!£©&£ 
*S - b o x 1 0 3 ©frf¥fC£tt£:£S - box (Z-dTte-^ft 1 6lffl S - b 
ox) ®^^*^ffit[C^fc'lo©S-boxt^ V^tlt^aB^Jfo-tflC 
o^tt), 2afcJK±©jgg&tCJ:oTffi5JCg?j^ £*lT^S„ 

(2) St^MD S iC J: o lit L < ttf MI 

t>-h&mm$&m<z>*iMD s) ###u ^o, ^*uc^Tt> en tBc^# 
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(1) (Co^Tte, $J*J£, S3 5 {C^-f J: o IC, 1 00 l©S-boxtl 
0 0 2©S-box^, ^Bl'X?^'r<fc^3&2 2fc©ffi»lCj:oTffi3:iCg!J^3 4x 
Tfc'J, fi&COS - b o xrajCt3V%Tt»ra«JC2~4*<Z>jg»tCj:oTffi5:iCigiK 
StlTV^. £*WC*fLT, »SQUAREIt#/R i j n d a e 1 
fMT'te, EI 3 6 lZm~t£ Z) tC, 1 0 0 3fflS-boxU 0 04CDS-box 

h^Ktt^PPT^t- <fce>{c 1 ^©^(DMjg-e&u (7?> • a y= 1) , m<DS 
- b o xracov^&iRf*ii-e&£ dfc#ot, fc£*i3&jnw:ffivo . 

(2) (CoVNTtt, ^M-T-5> «fc 5ic«ffc3*iTv*s 0 
[0191] 

±3B£ip&»fc'r«J*JC;l3W5 SQUARE ijCtiC^t S^fttCo 
[0 19 2] 

^•T, S Q U A R E licSl? AiJ h LTfflV^ A £-£©£31 & a**. 

*f-^tfnflO;W> (ntt«»i:-r S ; 1 /W h = 8 \£v hV$>2>) 

(a) JS»J^62 5 6 (=2 * 8) £3P3i*l<5 

(b) IfcU#£ 2 5 6 (=2 A 8) a^©ffi©e>^)CD 1 -D<D&ifimtl& (-r & 

~©2 5 6l0nA>f h0f-^Oi^JM^i:K. 

• AI^^AiJ^t§^JS-box (ir^) ©m;*j©&^fca;fc, A^HrX* 

[0 19 3] 

ffi#®j£-e&vvw h^nBewa&sAi^s:, a 3 o~0 3 3(D£?&±m 

&m&mr=.'?m&,KlSV}&Wi8L<D&iz S - b o x l 0 3 (D&¥V> S-bo x^{C 
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(i) Al^-ilftSCtt, M&.<Dm*S - b o x(D&¥(D S - b o x(Dmtl£ 

(ii) b<D2 5 6^^->lCt3V^T©fn*«OtC3&S<Z)tt, HS©^* 
S - b o x (Dm¥<D S - b o x <D A^J^S^ V V&£ 0 

[0194] 

zmzMVX. fi£5fc©S QUARES|^/R i j n d a e 1 Pf#T'li> #C<JDft 

1 t^fitS (0 3 6#I) „ 
(i* ) %kM<Dm¥<Z>S - b o xjtififfefcA&^-eS)*. 

(ii' ) tSCtf® S - b o x © A i3fit©ff tf >y h ?: 2 5 6 - > 
[0 19 5] 

j n d a e 1 Bf-JflCitie LT S - b o x©Ii:o^T*5 t. 1 jBS&JC^ 
Sfr«H£JC#83*l<6. o*»J. feSM©SQUARE^/Ri j n d a e 1 
Ht#{Cit^T. ^*lJ:*J 1 M^^V^fiRT?* S QUAREljcS{C^f5Mi 
|Bf^^#^.^tl§ 0 <fcoT, S QUARE&miZttT&£±m*. S-boxf 

[0 19 6] 
[0 19 7] 

H3 O~0 3 4 JC33V*TM^Lfc*MD S©«J0»C;fcV%T, EI 3 7 (a) ICa* 
"t&$ tfr©«J£^:S - boxl03-l-l 0t^4o©S- b o xfr£ 

V h^-^X T^tU IWfC, |fc*S - boxl03-l-2, Jj£^C S -bo 
x 1 0 3 - 1 - 3 . Jfc* S-boxl03-l-4, S - b o x 1 0 

3 - 2 - 1 , m± S-boxl 03-2-2, S-b o x 1 0 3-2-3, 

H;^S-boxl 03-2-4Ca^Tt, ^tl^tu X 21 ~X 24 fei;t>*X 2 , 
X 31 -X 34 ^J;t>*X3 , X 41 ~X 44 ^3J:t>*X 4 , Y n ~Y 1A &£ZfY x , Y 21 ~ 
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Y 24 fcJ:tfY 2 , Y 31 ~Y 34 fcJ:tJtY3 , Y 41 ~ Y 4A & J: Y 4 Tf^ffcflDfc'r 
[0 19 8] 

r©l§i=r&c, #f£*s - b o x l o 3 izMm-tz>4 fcf y Hf-^x 1 ~x 4 , 

Y l ~Y 4 <Z>#*£GF (2 4 ) ©Tcfc^fcl/fctg^lC, AAffl^Xj ~X 4 j&*& 
miJfi!l©Y 1 ~Y 4 &#«)Sfci!)CD^MD Sfr^Jtt, 0 3 7 (b) lC^-T<fc-5lC 

[0 19 9] 

fit, S3 O~03 4 &C&V\T, 15®© 1 -D<Dj&jzS - b o xCD^¥©4M 
W<DS - box^bl^y h-fo5JUffiLfc4 tfy h h> ^18© 1 otf)j&*S - 
b o x©fif¥<0.4M#UiDS - b o x#*e> 1 try h T »; ffi L fc. 4 tTy h t^lffl 
Ojgffi {£, 03 7 (b) Kl^MJ&?'£fT#JSI*K:oV^©G 

F (2 4 ) ±<D§jk&.<Dt£&&m (ffiM^Z-y) C&oTV>£ (03 0-03 4 
iCfcV^T, x5, xA, X E T?a*LT V*S) . 03 0~H3 4©»^ 

ttt 03 7 (b) ©Ig^ffittt, «MBlifcW«lCi&$. 
[0 2 0 0] 

r^Tf, 03 8JC, GF (2 4 ) G 
F (2 4 ) ©l~F<Z>7B©#*JCO^T3V#\ fcfc, fff & b <fc O IC, 

[0 2 0 1 ] 

J:SBLfc£ie£$Rfc , r*/S©*MD S £fWf 5lg-£tCfcl:, 03 0-03 4 fC 
fcWS 1 6te©*gi»fflS#fc, 038©3, 6, C, B, 5, A, 7, E {C^tfS - ^" 

[0 2 0 2] 

DS , ^di^iCtW^MDS (©MS) &St«>fc»^©RiP#flJ 

(Z)^MDS(Z) {(OmW it. 03 7 (b) © J: 3 fc*T^J©^fr#l 
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[0 2 0 3] 

GF (2 4 ) K£2>ftp}t s £<Dmm(D£X(Dmmtf3, 6, C, B 

, 5, a, 7, E©v^-rti^7?&ti«, ±mvr=.mmzmt=.~rz. £k&& 0 

[0 2 0 4] 

3iTf, ±fHL7^S^$:^fe1-MD Sff&mm** 03 9 (a) ~ ( d ) , ® 
4 0 (a) ~ (d) iCM^-T^o 
[0 2 0 5] 

(-) ff^jttjjRiaM^-rSa 

irt, MI9 (1, 2, 3, 4) -> (2, 3, 4, 1) fc, M3£ 

(1, 2, 3, 4) — (4, 3, 2, 1) &tt«OEI»ffl*^*3-&TT*^«Si^ 
fctS. MX-tf, (3, 3, 7, C) (3, 7, C, 3) -» (3, C, 7, 3 
) km^-r^tf, (3, 3, 7, C) -> (3, 7, 3, C) ttg^LfcV^ 

, ffi©^0>&f?*JfCM^#;fc&f?ofcfc<B£fcoTV>S o #ff*.tf, (6, B, 

E, E) it, (5, 5, A, E) _1 = (B, E, E, 6) $rM^#X.fe=fe;(Z)iC^ 

[0 2 0 6] 

3;ft£^Mttt, ±IH©«fce)JC^lS'rS3fe»Oiiei(K^mS:MV^T0 3 0~® 

IZ «fc o T S Z. 1 *» bTIBT? & -5 „ 

[0 2 0 7] 

039 (a) (b) fctt, a»BB»©B&«JC&»J, ^ £ £f® -if {IKcM 

te;£S:tt#fl!ncMv^tfj: <, dOj&fcj:, 03 9 (c) i: (d) , 04 0 ( 
a) t. (b) , 04 0 (c) £ (d) CD-^tl-TtltCOVNT^, mfcHS)* (&£ 
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[0 2 0 8] 

#s-box^(D|g|f|;^->[t 03 8<£>3, 6, C, B, 5, 
A, 7, E{c*fjcS-rs=b©lcRS3tSti1*, 391:^1-* rii^BTIB-e* So Mi 
If. 04 2 (c) ^ (d) iZ7Tft£ o&U%&rt*-yiZm3 8 fCfi^i;;ftTV\& 

[0 2 0 9] 

037 (a) ©X n ~X 14 , X 21 ~X 24 . x 3i~ x 34> X 4i~ 
X 44 $: 1 6«©A;*7fcU Y n ~Y 14 , Y 21 ~Y 24 , Y 31 ~Y 34 , Y 41 ~Y 44 * 
1 6M©ffi;fr£ bT, 1 6ff 1 6#f©MD S & M V ^ *l li <fc V^ 0 
[0 2 10] 

S3 7 (b) <D$S7£fi£ffcte. 04 2 ©^jc^-rs^i: 
f&fc>*u 03 7 (b) ©5, A*fctiE<Z>S*S:-e*l^*l*flS"rS4^f 4^JCD 
*T#J^^LT^j£^Said[HcA*lSfc, 04 2<D£oiZ&£ (04 2t'(i, 4 

[0211] 

-^r-e, #J;Uf. fe5s-boxf4ffi^H;^->^Lt04 2 (c) 
& (d) lZ^~f&oteUm^*->%:m^Z>m&lZlt. 03 8 1 6fil 

6^|©^J©*f|S , tS4ff 4^rj©a$dS"S:, 04 2 (c) (d) IC^fJ: 

■) & 4 ft 4 fliaiiiucaajt'rtu* «fc vn d fs^M©*^^ h 

4 o<£> 1 tfy hA#£, 1 tfy hm^Ji: Itt^ti^difi 1 

#J £ & o T V * -5 & <D Tf & £ o 
[0212] 

Zltf) J: 5 fC0 3 O~0 3 3© s - b o x F3<D%g%&^$ — V £ LX&M0)1&18Lrt 

$-y*m^z>m&iz%, ^#{ftjfcovNT04 2(D£oizmmLfc.m&<Dftm(D 
&ft?M\ &^m\z^^xm± 2<n&o\zm^t=.^<Dftmt.tez> a 
nm&vmmfcmb. &M(D%sm^*-y%:m^x (03 0-03 4 ^pu^mcl 
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[0213] 

JifHT'ttS^ (1) t IT, 
( 1 ) IffSOit^S - b o x©ttr^lCfeWS^S - b ox©^^f,fttlCl 
/u£ 1 o© S-boxi:, &a<Z>fi£:*S - b o xCDtft^lCfcttS^S - box© 

r co » fn u r mm. -rz> z. n *> «r te -5 . 

[0214] 

(1* ) UHOi* S - b o x tftSCjfi^ S - b o x t ©^T ©jfift^fc-ft 
©#*&C^T\ 4>&< l,1fi©, ^Stt&©©*£^:S-b o x©tfe^©4^© 
s - b o x©?*>© 1 oil*5KI£©©&:*S - b o x©frf¥©4o© s - b o x 

(1* ' ) l&S©fife^:S - b o x©|Sf^tCfet"tS^3&< i:* loos'-b o x 
fc* ^l£©fe£;*:s - b o xotft^icfcttS^fcK £ t> 1 o© s - b o x 2 
*J^_h©^{^{CJ:oTffiSfC^ ^tiTVN^o 
[0 2 15] 

£<Z>«fc - "2>fc&#©t§-&lCtt, S-box«|l;^->^GF (2 4 ) _h© 
m»©jS*l*3a tCRB^-rSfc^-efc, 03 8©l~FfC*fj£1- 

[0 2 16] 

S-b o xraa>je»^*->S:GF (2 4 ) J:©^!!©^^ (Jgjffi 
/^<5t->) fCML&V^£(±, Witf@!4 2 (a) ^ (b) JCM^t" -5 * © & 

£ & m * & m fig / 1 # - y $> s v \ it w jz -r s n n & m v * & r £ # -e s £ - 

[0 2 17] 
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[0 2 18] 

±fHh|WI#(D#^^{Cj: y, 8 If >y h • -r r -^©e)*><Z)|lIC^M(Z)2 fcf 
v hrfctCJM&fT^ililLT, #Sag*< 8 fcf >y h (D 4 ff 4 #Itf)MD Sfr^J ( 
GF (2 8 ) ) 4 IfflSLt, ^MD S Sr«fifc-T-S ^ £ =fe «rtgT'&£ 0 
, 8t^y h • %<Z)|rJ 4 t?>y h Z Z.lZjUM&ff-5 UlsT. 

#3I3R#1 6 fcfy h©4|T4^J©MD Sff#I (GF ( 2 16 ) ) 2TOIT 
, *MD S Srflt^f Sifc^nflBT?**. #M3&# 3 2 hf y h©4 fr4 #| 
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